User authentication and session logging with Google Cloud

Question

I am using Google Application Engine to host a web application and Google Cloud Storage to host documents.

I would like to keep track of:

• User authentication (performed via OAuth);
• User token expiration (to keep track of the active sessions);
• User interaction with the storage API to monitor their actions.

Is it possible to tune Stackdriver for this purposes? And how? Is there a specific guide I can follow?

Answer 1

Give a look at Identity-Aware Proxy. Basically with IAP you should be able to control all the accesses to your application deployed within GCP. You can then tune your logging scope as described as follows: https://cloud.google.com/iap/docs/audit-log-howto.

---

Disclaimer: Comments and opinions are my own and not the views of my employer.